Wellspent (“we”, “us”) is operated by Future Bets, Inc., 251 Little Falls Drive, Wilmington, Delaware 19808, United States. This policy explains what we collect when you use wellspent.co, find.wellspent.co, quiz.wellspent.co, our API at api.wellspent.co, and our MCP server and agent endpoint for AI assistants, and what we do with it.
Who this covers
- People looking for an advisor, who browse the public graph, take the matching quiz, or ask to be introduced to an advisor.
- Advisors, both those listed in the public graph and members who pay for a Wellspent profile.
- Developers and AI assistants, who use our API, MCP server, or agent endpoint.
What we collect
When you browse. We use PostHog, served through our own domain (v.wellspent.co), to understand how the sites are used: pages viewed, clicks, approximate location derived from IP address, browser, and device. We don’t create a profile of you unless you sign in as a member. On advisor pages we count daily views per page, without recording who viewed them.
When you search for an advisor. When you take the quiz or use the match tool, or an AI assistant searches on your behalf through our MCP server or agent endpoint, we store the search (location, the expertise you’re looking for, and similar filters) and the results, with your IP address and browser user agent for abuse prevention. Quiz answers may also include your situation, an optional asset range, whether you’re open to virtual meetings, and any notes. If you give an email address or first name, we store those too.
When you request an introduction to an advisor. We collect your name, email address, optional phone number and location, and your message. We send these to the advisor you chose so they can reply to you directly, and keep a copy so the advisor can see the request in their Wellspent inbox.
Advisors listed in the public graph. Listings are built from public sources: professional directories such as NAPFA, the XY Planning Network, and the Advice-Only Network; public regulatory records, such as the SEC’s Investment Adviser Public Disclosure system and Form ADV filings; and what the advisor’s firm publishes on its own website, such as fees, specialties, and whether it’s accepting new clients. Our crawler, Wellspent-ProfileBot, reads a few pages of each firm’s website and follows robots.txt; an AI model extracts the facts, and we keep the quoted source for each one. Listings show professional information only: name, firm, location, credentials, fees, specialties, and links. To correct or remove a listing, email [email protected].
Members (advisors with a paid profile). We collect your email address for sign-in, the profile information you choose to publish (title, firm, location, fees, specialties, credentials, education, background, and your CRD number), and billing records. Payments are handled by Stripe; we never see or store your full card number. We check your CRD number against public SEC records and show the result on your profile.
AI visibility reports. For members, we periodically ask an AI model questions a prospective client might ask, using the public facts on your profile, and show you whether and how you’re mentioned. Only public profile information is sent.
Developers. If you sign up for an API key, we store your email address, the key’s usage counts, and request metadata needed to enforce limits.
Signing in. Sign-in links are sent by email and expire. We store only a hashed version of each link’s token.
How we use it
- To run the public graph, the matching tools, and member profiles.
- To send introduction requests to the advisor you chose.
- To send sign-in links, receipts, and service emails.
- To prevent abuse, through rate limits and spam checks.
- To understand and improve the product, using aggregated analytics and aggregate counts of what people search for.
- To meet legal, tax, and accounting obligations.
We don’t sell personal information, and we don’t share it for cross-context behavioral advertising.
Who we share it with
These service providers process data for us under their own terms:
| Provider | What they do |
|---|---|
| Cloudflare | Hosting, database, security, email routing |
| Stripe | Payments and billing |
| Resend | Email delivery |
| PostHog | Product analytics |
| Anthropic | AI visibility reports, reading public firm websites, and market research questions (public information only) |
| Firecrawl | Fetching some public firm websites |
We also share:
- your introduction request with the advisor you send it to;
- information when the law requires it.
Public information and AI assistants
Listings and member profiles are public by design. Search engines and AI assistants can read them, including through our MCP server, our agent endpoint, and Markdown versions of each page. Members choose what goes on their profile and can change or unpublish it at any time.
How long we keep it
- Listings in the public graph: kept and updated for as long as the advisor is in practice. Advisors can ask us to correct or remove a listing at any time.
- Member profiles, account data, and visibility reports: kept while you’re a member. After your membership ends, your page goes back to a basic listing, and your account data is deleted two years later, or sooner if you ask.
- Billing records: kept for seven years, as tax law requires.
- Introduction requests and quiz answers: deleted after two years, or sooner if you ask.
- IP addresses and browser details in search and quiz logs: removed after 90 days. Aggregate counts, such as how many people searched for a specialty in a region, are kept.
- Payment event records from Stripe: deleted after 90 days.
- Analytics data: kept in PostHog for up to one year.
Your choices and rights
You can ask us to access, correct, or delete your personal information, or to stop processing it, by emailing [email protected]. Depending on where you live, including California and Canada, you may have additional rights; we’ll honour requests as the law requires. You can block analytics with your browser’s tracking protections or an ad blocker.
Children
Wellspent is not intended for anyone under 18, and we don’t knowingly collect their information.
Security
We use encryption in transit, hashed sign-in tokens, access controls, and rate limits. No system is perfectly secure; if a breach affects your information, we’ll notify you as the law requires.
Changes
If we make material changes, we’ll update the date above and, for members, notify you by email.
Contact
[email protected] · Future Bets, Inc., 251 Little Falls Drive, Wilmington, Delaware 19808, United States